Marg Thycotic Secret Server

I began using Thycotic as a replacement to my team's internal KeePass database. The tool itself has a wealth of functionality, including the ability to automatically change passwords, pass credentials through to Remote Desktop, the ability to set extremely gradual permissions on 'secrets,' and the ability to require a second form of 'approval' before a user is able to access the secret.. What's perhaps even better is the fact that basically all actions are logged, so I can keep track of exactly who has accessed usernames and passwords for our applications.

There are a few points that detract from the overall experience, however, these are fairly minor.

First and foremost, from a user interface standpoint is, quite frankly, ugly (in my opinion). This could be the theme our IT staff chose to implement, or it may simply 'be the way the app is.' Regardless though, the interface is somewhat cumbersome and cluttered, and reminds me of a time when web applications were just beginning to embrace responsive design, etc.

Additionally, our implementation requires the use of two factor authentication. From a security standpoint, this is spectacular. From an practicality standpoint, I find it frustrating that if I successfully authenticate with my username and password, and then get my 2 factor authentication code incorrect, I am taken back to the main login screen, where I need to re-enter my username and password all over again.

Recommendations to others considering the product:

What problems are you solving with the product? What benefits have you realized?

I think the interface is easy to navigate. Once you get a handle on how to run through the process, the same applies to everything. And the folder structure is similar to what we use currently, so it helps visually with the transition.

I don't like the color scheme. I know that's a silly thing, but it feels very old school and a little distracting. It's why I needed help to learn the process. I also don't like all the chrome extensions you need.

Recommendations to others considering the product:

What problems are you solving with the product? What benefits have you realized?

I like the extra level of security and the convenience of all your passwords in one location. I also like that it is compatible with DUO mobile for dual authentication. Lastly i like that it was very easy to import from our old password storage software (Keepass and Excel).

i dislike that currently the Android mobile app does not work on our on-prem environment. We are currently working to resolve this. It is accessible through a mobile web browser just fine though.

What problems are you solving with the product? What benefits have you realized?

This is a great application for your passwords. Offers several templates (i.e. bank account, combination lock, contact, credit card, healthcare, simple passwords, product license keys, remote desktop account, social security number, etc.) and you can do your own, which is great.

It does offer to generate safe passwords. It is very reliable, you can access to your information from anywhere, has main, double step password recovery and you pay for it ONCE.

I have been using it for more than five years now, no need to have another one.

Old, not updated interface. No possibility to add pics, photos nor images of credit cards, etcetera.

Difficult to personalize templates, but it is totally doable.

App and online Password generator does not offers option to select letters only, numbers, signs, or length.

App Does not integrate websites nor other apps.

Recommendations to others considering the product:

What problems are you solving with the product? What benefits have you realized?

I really like that you can completely host a copy of the software internally so you don't have to worry about exposing your passwords to the Internet. We have a self-hosted edition of Thycotic Secret Server (TSS for short) that supports multiple teams and thousands of passwords. It works really well for that scenario and we don't have to worry about our vault being compromised by outside forces.

TSS has a Chrome plugin that populates passwords for you, but in order for it to work, you have to be logged into TSS. I would really like it if it worked more like LastPass and cached your passwords for a set number of days and populated them from your Chrome cache. It's annoying to have to log back in every time you want to populate a password (if you haven't done so in more than 15 minutes).

Recommendations to others considering the product:

What problems are you solving with the product? What benefits have you realized?